signed in user after checked for auth token